PRACTICAL PRIVACY NOTICE · UPDATED JULY 18, 2026
Privacy, without invented promises.
This notice describes the current Firmy product. It does not claim certifications or protections that have not been verified.
What Firmy stores
Firmy stores account identity, matters, prompt counts, collected text, file metadata, private uploaded files, organized outputs, generated workspace files, and limited account status data so the product can function across sessions.
How uploads are handled
Uploads and generated workspace files are placed in private object storage and retrieved only through authenticated, ownership-checked application routes. They are not intentionally published at public file URLs.
AI processing
When you choose “I’m finished — organize” or deliberately use an Ask Firmy capability, relevant material may be sent to the configured AI provider to produce the requested output. Firmy does not begin Collection Mode analysis automatically after each upload. Web research, data analysis, and image generation may use provider-hosted tools when you deliberately select them.
Payments
Payments are currently disabled and no subscription is required for the private preview. Billing infrastructure may remain configured for future testing, but Firmy does not automatically charge users.
What is not claimed
Firmy does not currently claim SOC 2 certification, HIPAA compliance, attorney-client privilege, or any specific encryption certification. Retention, deletion, incident-response, subprocessors, and data-residency processes remain under development.
Your responsibilities and requests
Do not upload information you are not authorized to process. Verify important outputs and source material. Contact privacy@firmy.space for privacy requests. This notice still requires review for Firmy’s final operating entity and applicable jurisdictions.